EUVD-2017-17988

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

libxml2 is vulnerable to stack-based buffer overflow causing crashes in programs using it.

Reporter	Title	Published	Views	Family All 115
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2017Q4 Security Updater: IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libxml2 affects IBM Cognos Analytics	15 Jun 201823:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM BladeCenter Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Streams may be affected by XMLsoft Libxml2 vulnerabilities	16 Jun 201814:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	29 Mar 202315:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to denial of service due to CVE-2017-9047, CVE-2017-9048, CVE-2017-9049 and CVE-2017-9050	7 Nov 202216:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source libxml2 vulnerabilities	19 Jun 202518:09	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package libxml2 version 1:2.9.9.0.52.f824-alt1	22 May 201900:00	–	altlinux

[
  {
    "enisaIdVendor": [
      {
        "id": "1397f483-d06f-3cd6-ba9b-b21349119190",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f66dfb1e-c07b-3154-b47b-782dc0abd2d2",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2017-9048.html
debian	www.debian.org/security/2017/dsa-3952
access	www.access.redhat.com/errata/RHSA-2018:2486
ubuntu	www.ubuntu.com/security/CVE-2017-9048
advisories	www.advisories.mageia.org/CVE-2017-9048.html
debian	www.debian.org/security/2017/dsa-3952
security	www.security.gentoo.org/glsa/201711-01
openwall	www.openwall.com/lists/oss-security/2017/05/15/1
securityfocus	www.securityfocus.com/bid/98556
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

07 Oct 2025 00:30Current

8.5High risk

Vulners AI Score8.5

CVSS 37.5

CVSS 25

EPSS0.00601

libxml2 vulnerability stack-based buffer overflow php crash